Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/lEeX1Eg0Z-W1kOpICD-OcFxqe18.roa
File: lEeX1Eg0Z-W1kOpICD-OcFxqe18.roa (raw, json)
Hash identifier: oHYZvay6jraEH9M8mxk8k8IOPDuHNAZIsTWqM0koag4=
Subject key identifier: 94:47:97:D4:48:34:67:E5:B5:90:EA:48:08:3F:8E:70:5C:6A:7B:5F
Certificate issuer: /CN=7518c2273ad74364649bcb2e2d34fb707f5d5b94
Certificate serial: 019423D6D31B0F158726FEF8DFFE3CACE609
Authority key identifier: 75:18:C2:27:3A:D7:43:64:64:9B:CB:2E:2D:34:FB:70:7F:5D:5B:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/lEeX1Eg0Z-W1kOpICD-OcFxqe18.roa
Signing time: Wed 01 Jan 2025 21:47:48 +0000
ROA not before: Wed 01 Jan 2025 21:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56534
IP address blocks: 45.140.76.0/23 maxlen: 23
45.140.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:d3:1b:0f:15:87:26:fe:f8:df:fe:3c:ac:e6:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7518c2273ad74364649bcb2e2d34fb707f5d5b94
Validity
Not Before: Jan 1 21:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=944797d4483467e5b590ea48083f8e705c6a7b5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:81:c0:91:db:f1:d3:93:37:2a:28:8e:80:b9:
55:b9:fd:96:29:bd:3d:ec:b0:b8:60:4c:67:40:9b:
24:4b:5b:72:75:86:b4:43:f8:34:4b:bc:79:58:c0:
30:cc:5e:4e:34:b6:aa:43:4c:79:79:cf:24:7c:e5:
2d:4b:3d:7e:9b:9d:f0:1a:70:70:53:13:e2:11:57:
24:03:13:82:41:50:f4:d8:72:9d:90:95:77:ad:a8:
03:e5:5c:d2:db:a0:25:c5:11:20:28:6c:bf:14:1c:
c7:1e:12:1d:da:db:23:3c:31:c0:e8:e2:1a:84:c2:
8b:21:98:4f:d5:4c:9d:e6:a3:4b:b3:37:7d:52:e0:
a5:04:dc:44:e0:27:34:aa:6b:6c:9b:8c:a8:03:3a:
c5:0d:2b:b0:27:f7:cf:e2:a8:49:45:68:da:d7:b4:
46:05:7b:ea:9c:e3:c6:a0:c9:91:c6:13:2c:c9:b3:
20:6f:5d:8f:54:4d:5b:a6:77:69:be:92:aa:84:d0:
c9:b0:53:49:69:a6:02:47:73:71:dc:c0:f0:d9:74:
a2:39:5d:c9:89:7d:51:08:35:06:a9:46:8b:c9:10:
4c:43:f0:f5:b3:a5:07:e2:dc:a0:0a:d7:12:1f:84:
39:bb:df:9c:41:c7:2b:b5:de:87:cf:f0:12:f8:e3:
96:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:47:97:D4:48:34:67:E5:B5:90:EA:48:08:3F:8E:70:5C:6A:7B:5F
X509v3 Authority Key Identifier:
keyid:75:18:C2:27:3A:D7:43:64:64:9B:CB:2E:2D:34:FB:70:7F:5D:5B:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/lEeX1Eg0Z-W1kOpICD-OcFxqe18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.76.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:54:9d:48:dc:ea:85:01:e8:16:df:fc:54:df:56:91:5f:a9:
8b:a3:b8:45:ea:06:f1:c6:ec:c0:d3:a5:12:08:4f:23:1f:fe:
32:ee:34:cc:22:2d:22:e2:7e:62:80:7e:9a:1f:76:42:73:d3:
6c:fe:7f:bf:a3:0c:42:bf:68:02:31:3b:34:8f:ef:c8:9e:6d:
0d:48:26:c1:7d:2d:9b:b7:db:c9:4d:8d:63:e7:5e:44:42:ba:
39:65:2f:8f:e7:4b:95:99:0c:f8:fb:7f:59:3d:16:69:20:3d:
8f:22:3c:8f:01:4f:50:fb:39:83:5f:3c:06:3a:c4:0e:b9:74:
b4:88:5f:20:56:05:87:78:cb:c0:5d:d5:04:49:45:a5:32:0d:
a6:0c:0b:a6:03:43:8f:5a:2b:59:e1:d5:27:a1:59:07:06:56:
31:32:82:3c:8f:26:73:9c:09:db:55:bc:d6:cb:e3:44:f8:39:
c2:27:fd:0c:39:af:5b:6b:55:89:4a:dd:cb:8a:42:54:2e:05:
02:31:a4:d6:e3:8d:38:5e:fc:b2:e4:18:f1:b1:8d:e8:d2:4f:
91:43:79:e4:d1:08:f5:d4:37:f5:6a:40:71:d4:4e:45:63:87:
ab:ed:e8:d0:f1:2c:c0:0b:75:18:dd:b1:64:ae:6b:87:88:b3:
e0:e7:87:db
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1tMbDxWHJv743/48rOYJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MThjMjI3M2FkNzQzNjQ2NDliY2IyZTJkMzRmYjcwN2Y1
ZDViOTQwHhcNMjUwMTAxMjE0NzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDQ3OTdkNDQ4MzQ2N2U1YjU5MGVhNDgwODNmOGU3MDVjNmE3YjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3oHAkdvx05M3KiiOgLlVuf2WKb09
7LC4YExnQJskS1tydYa0Q/g0S7x5WMAwzF5ONLaqQ0x5ec8kfOUtSz1+m53wGnBw
UxPiEVckAxOCQVD02HKdkJV3ragD5VzS26AlxREgKGy/FBzHHhId2tsjPDHA6OIa
hMKLIZhP1Uyd5qNLszd9UuClBNxE4Cc0qmtsm4yoAzrFDSuwJ/fP4qhJRWja17RG
BXvqnOPGoMmRxhMsybMgb12PVE1bpndpvpKqhNDJsFNJaaYCR3Nx3MDw2XSiOV3J
iX1RCDUGqUaLyRBMQ/D1s6UH4tygCtcSH4Q5u9+cQccrtd6Hz/AS+OOWUwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJRHl9RINGfltZDqSAg/jnBcantfMB8GA1UdIwQY
MBaAFHUYwic610NkZJvLLi00+3B/XVuUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFJqQ0p6clhRMlJrbThzdUxUVDdjSDlkVzVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy80Y2NhNDgtMzE4OS00NDkxLWFlZGUt
ZDNkMzBlYmMzNmFjLzEvbEVlWDFFZzBaLVcxa09wSUNELU9jRnhxZTE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy80Y2NhNDgtMzE4OS00NDkxLWFlZGUtZDNkMzBlYmMzNmFj
LzEvZFJqQ0p6clhRMlJrbThzdUxUVDdjSDlkVzVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLYxMMA0G
CSqGSIb3DQEBCwUAA4IBAQBMVJ1I3OqFAegW3/xU31aRX6mLo7hF6gbxxuzA06US
CE8jH/4y7jTMIi0i4n5igH6aH3ZCc9Ns/n+/owxCv2gCMTs0j+/Inm0NSCbBfS2b
t9vJTY1j515EQro5ZS+P50uVmQz4+39ZPRZpID2PIjyPAU9Q+zmDXzwGOsQOuXS0
iF8gVgWHeMvAXdUESUWlMg2mDAumA0OPWitZ4dUnoVkHBlYxMoI8jyZznAnbVbzW
y+NE+DnCJ/0MOa9ba1WJSt3LikJULgUCMaTW4404Xvyy5BjxsY3o0k+RQ3nk0Qj1
1Df1akBx1E5FY4er7ejQ8SzAC3UY3bFkrmuHiLPg54fb
-----END CERTIFICATE-----
Generated at Mon Apr 7 12:16:53 2025 by rpki-client